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\ Abstract 

The vr-calculus is a process algebra where agents interact by sending communication 
hnks to each other via noiseless communication channels. Taking into account the 
reality of noisy channels, an extension of the vr-calculus, called the VTTv-calculus, has been 
introduced recently. In this paper, we present an early transitional semantics of the ttn- 
calculus, which is not a directly translated version of the late semantics of tttv, and then 
extend six kinds of behavioral equivalences consisting of reduction bisimilarity, barbed 
bisimilarity, barbed equivalence, barbed congruence, bisimilarity, and full bisimilarity 
into the vTTv-calculus. Such behavioral equivalences are cast in a hierarchy, which is 
helpful to verify behavioral equivalence of two agents. In particular, we show that due 
J> I to the noisy nature of channels, the coincidence of bisimilarity and barbed equivalence, 

as well as the coincidence of full bisimilarity and barbed congruence, in the vr-calculus 
does not hold in vr^v- 



(N 

o 

o 



Keywords: vr-calculus, vr-calculus with noisy channels, barbed equivalence, barbed con- 
gruence, bisimilarity. 

1 Introduction 



rn 

O 
oo 
O 

> 

X 

' The need for formal methods in the specification of concurrent systems has increas- 

ingly become well accepted. Particular interest has been devoted to Petri nets [361 [39] , 
CSP [Sa [23], ACP [TU], CCS [Ml [29], and the vr-calculus The last one due to 

Milner et al. was developed in the late 1980s with the goal of analyzing the behavior of 
mobile systems, i.e., systems whose communication topology can change dynamically, 
and it turns out to be the unique one among the aforementioned calculi that can ex- 
press mobility directly. The vr-calculus has its roots in CCS, namely CCS with mobility, 
introduced by Engberg and Nielsen [16], while the capacity of dynamic reconfiguration 
of logical communication structure gives the vr-calculus a much greater expressiveness 
than CCS. 

In the vr-calculus, all distinctions between variables and constants are removed, com- 
munication channels are identified by names, and computation is represented purely as 
the communication of names across channels. The transfer of a name between two 
agents (processes) is therefore the fundamental computational step in the vr-calculus. 
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The basic (monadic) vr-calculus allows only communication of channel names. There 
are two extensions of such a communication capability: One is the polyadic vr-calculus 
[30] that supports communication of tuples, needed to model passing of complex mes- 
sages; the other is the higher-order vr-calculus fW\ that supports the communication 
of process abstractions, needed for modeling software composition within the calculus 
itself. Interestingly, both of them can be faithfully translated into the basic vr-calculus. 

As we see, communication is a key ingredient of the vr-calculus. It is worth noting that 
all communication channels in the vr-calculus are implicitly presupposed to be noiseless. 
This means that in a communication along such a channel, the receiver will always get 
exactly what the sender delivers. However, it is usually not the case in the real world, 
where communication channels are often not completely reliable. Recently, Ying [54] 
took into account the noise of channels, an idea advocated in his earlier paper [5T], and 
proposed a new version of the vr-calculus, called the vrjy-calculus. Such a calculus has the 
same syntax as that of the vr-calculus. The new feature of vrjv arises from a fundamental 
assumption: Communication channels in vr^v may be noisy. This means that what is 
received at the receiving end of a channel may be different from what was emitted. 

According to a basic idea of Shannon's information theory [l5] that noise can be 
described in a statistic way, the noisy channels in vrAr was formalized in [53] as follows: 
Firstly, like in vr, all (noisy and noiseless) communication channels are identified by 
names. Secondly, to describe noise, every pair of (channel) names x and y is associated 
with a probability distribution Px{-\y) over the output alphabet (here it is just the set of 
names), where for any name z, Px{z\y) indicates the probability that z is received from 
channel x when y is sent along it. Finally, based on the probability information arising 
from the noisy channels, a late probabilistic transitional semantics of vr^v is presented. 
The essential difference between this semantics and that of vr is mainly caused by the 
actions performed by an output agent xy.P. In vr, this agent has a single capability of 
sending y via channel x, expressed as the transition xy.P P, which implies that 
the same name y will be received at the receiving end of the channel. However, because 
of noise, in the vrjy-calculus the corresponding transition would be xy.P —^p^[z\y) P- 
This probabilistic transition indicates that although the name intentionally sent by 
the agent is y, the name at the receiving end of the channel x may be the name z, 
different from y, with the probability px{z\y). We refer the reader to Section 1.2 in 
|54j for a comparison between this model of noisy channels and the existing literature 
[Il[2l[3lll|5l[ni[8l[9l[20l[25l[27l[38] including some works about other formal models 
with unreliable communication channels. 

It is well known that behavioral equivalences play a very important role in process 
algebras because they provide a formal description that one system implements another. 
Two agents are deemed equivalent when they "have the same behavior" for some suitable 
notion of behavior. In terms of the vr-calculus, various behavioral equivalences have been 
studied extensively; examples are[71[IIl[l2l[l8l[32l|3l[371l3Qll3Il[32]. In[M], some 
concepts of approximate bisimilarity and equivalence in CCS [50 tl52l[53] were generalized 
into the vr^r-calculus; such behavioral equivalences involve quantitative information — 
probability, since the agent in vtat is represented by a probabilistic transition system. 
To our knowledge, except for this work there are no probabilistic versions of behavioral 
equivalences in the vr-calculus and its variants, although probabilistic extensions of the 
vr-calculus [19l |20l [36] were introduced. 

The purpose of this paper is to extend some classical behavioral equivalences related 
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to (strong) barbed equivalence and (strong) bisimilarity into vtat and cast them in a 
hierarchy. Following the model of noisy channels in [51], we develop an early transitional 
semantics of the VTAr-calculus which makes the study of behavioral equivalences somewhat 
simpler. It is worthy of note, however, that unlike in the vr-calculus, this semantics is 
not a directly translated version of the late semantics of tttv in ^M- Surprisingly, we 
have found that not all bound names in ttat are compatible with alpha-conversion when 
we remove the strong assumption in [Mj that free names and bound names are distinct. 
As a result, we have to add a rule for inputting bound names to the corresponding early 
semantics of tt. In addition, to handle transitions of ttn well, we group the transitions 
according to their sources. 

Reduction Bisimilarity (— ) _ , . , , 

Hcduction Bisimilarity (— ) 



Barbed Bisimilarity (~) Barbed Bisimilarity (~) 



Barbed Equivalence («) = Bisimilarity (~) Barbed Equivalence («) 

Barbed Congruence (~) Bisimilarity (~) 



Barbed Congruence (~) = Full Bisimilarity (~) 

Full Bisimilarity (~) 

(a) Hierarchy in the 7r-calculus (b) Hierarchy in the TTAr-calculus 

Figure 1: Hierarchy of behavioral equivalences, where an arrow A ^ B expresses that 
A is strictly included in B 

Based upon the early transitional semantics of ttat, we then extend six kinds of be- 
havioral equivalences consisting of reduction bisimilarity, barbed bisimilarity, barbed 
equivalence, barbed congruence [S^, bisimilarity, and full bisimilarity [321 133j into the 
TTAT-calculus. All these equivalences are defined through certain bisimulations involving 
internal action and discriminating power. Because of noisy channels, a transition may 
occur with a certain probability, and thus all the bisimulations are defined quantita- 
tively. Some basic properties of these equivalences have been investigated. Finally, we 
concentrate on a hierarchy of these behavioral equivalences. In particular, due to the 
noisy nature of channels, the coincidence of bisimilarity and barbed equivalence which 
holds in the vr-calculus, as well as the coincidence of full bisimilarity and barbed con- 
gruence, fails in the TTTv-calculus. This hierarchy is shown in Figure [H together with a 
corresponding hierarchy in vr (see, for example, |43j ) . Clearly, the hierarchy is helpful 
to verify the behavioral equivalence of two agents: one can start a proof effort at the 
middle tier; if this succeeds, one can switch to a finer equivalence; otherwise, one can 
switch to a coarser equivalence. 

The remainder of this paper is structured as follows. We briefly review some basics of 
the TT-calculus in Section 2. After recalling the formal framework of ttat [H] in Section 
3.1, we develop the early transitional semantics of the vTAr-calculus and present it in 
two different forms in the remainder of this section. Section 4 is devoted to reduction 
bisimilarity and barbed bisimilarity, equivalence, and congruence. In the subsequent 
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section, the other two equivalences, bisimilarity and full bisimilarity, are explored. We 
complete the hierarchy of these behavioral equivalences in Section 6 and conclude the 
paper in Section 7. 

2 TT-calculus 

For the convenience of the reader, this section collects some useful facts on the vr- 
calculus from [33]. The syntax, the early transitional semantics, and some notations of 
the vr-calculus are presented in Section 2.1. Section 2.2 briefly reviews several behavioral 
equivalences of the vr-calculus. We refer the reader to (HH IMJ [SSj [43] and the references 
therein for an elaborated explanation and the development of the theory of vr. 

2.1 Basic definitions 

We presuppose in the vr-calculus a countably infinite set N of names ranged over 
by a,b, . . . ,x,y, . . . with r N, and such names will act as communication channels, 
variables, and data values. We employ P,Q,R,... to serve as meta-variables of agents 
or process expressions. Processes evolve by performing actions, and the capabilities for 
action are expressed via the following four kinds of prefixes: 

vr ::= xy \ x{z) \ t \ [x = y]vr, 

where xy, an output prefix, is capable of sending the name y via the name x; x{z), an 
input prefix, is capable of receiving any name via x; t, the silent prefix, is an internal 
action; and [x = ?/]vr, a match prefix, has the capability vr whenever x and y are the 
same name. 

We now recall the syntax of the vr-calculus. 

Definition 2.1. The processes and the summations of the vr-calculus are given respec- 
tively by 

P ::= M \ P\P' I {uz)P \ IP 
M ::= 0\tt.P\M + M'. 

In the definition above, is a designated process symbol that can do nothing. A 
prefix ir.P has a single capability expressed by vr; the agent P cannot proceed until 
that capability has been exercised. A sum P + Q represents an agent that can enact 
either P or Q. A parallel composition P\Q represents the combined behavior of P and Q 
executing in parallel, that is, P and Q can act independently, and may also communicate 
if one performs an output and the other performs an input along the same channel. The 
restriction operator {vz) in {i'z)P acts as a static binder for the name z in P. In addition, 
the input prefix x{z) also binds the name z. The agent \P, called replication, can be 
thought of as an infinite composition P\P\ - ■ ■ or, equivalently, as a process satisfying 
the equation \P = P\\P. Iterative or arbitrarily long behavior can also be described 
by an alternative mechanism, the so-called recursion. It turns out that replication can 
encode the recursive definition (see, for example. Section 9.5 in |31j). 

Let us introduce some syntactic notations before going forward. As mentioned above, 
both input prefix and restriction bind names, and we can define the hound names bn(P) 
as those with a bound occurrence in P and the free names fn(P) as those with a not 
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bound occurrence. We write n(P) for the names of P, namely, n(P) = fn(P) U bn(P), 
and sometimes use the abbreviation fn(P, Q) for fn(P) U in{Q). 

A substitution is a function from names to names that is the identity except on a finite 
set. We write {y/x} for the substitution that maps x to y and is identity for all other 
names, and in general {yi, . . . , yn/xi, . . . , Xn}, where the Xj's are pairwise distinct, for 
a function that maps each Xi to yi. We use a to range over substitutions, and write xa, 
or sometimes for a applied to x. The process Pa is P where all free names x are 

replaced by cr(x), with changes of some bound names (i.e., alpha-conversion) wherever 
needed to avoid name captures. 

For later need, we fix some notational conventions: A sequence of distinct restric- 
tions (I'Zi) ■ • ■ {vZn)P is often abbreviated to {uzi ■ ■ ■ Zn)P, or just {v'z)P when n is not 
important. We sometimes elide a trailing 0, writing a for the process a.O, where this 
cannot cause confusion. We also follow generally used operator precedence on processes. 

For our purpose of investigating barbed equivalence, we only recall the early tran- 
sition rules here; the reader may refer to [32^ H3] for the late one. The transition rules 
are nothing other than inference rules of labeled transition relations on processes. The 
transition relations are labeled by the actions, of which there are four kinds: the silent 
action r, input actions xy, free output actions xy, and bound output actions x{y). The 
first action is internal action, the second is receiving the name y via the name x, the 
third is sending y via x, and the last is sending a fresh name via x. Let a, /?, . . . range 
over actions. We write Act for the set of actions. If a = xy, xy, or x{y), then x is called 
the subject and y is called the object of a. The free names and bound names of an action 
a are given by 

r 0, ifa = r 

fn(a) = < {x, y}, if a = xy or xy 
[ {x}, if a = x{y) 

and 

, , _ J 0, if a = r, xy, or xy 
I {y}, if a = x(y). 

The set of names, n(a), of a is fn(a) U bn(a). 

The transition relation labeled by a will be written as Thus, P Q will 

express that P can evolve invisibly to Q; P Q will express that P can receive y via 
X and become Q; P Q will express that P can send y via x and evolve to Q; and 

P Q will express that P evolves to Q after sending a fresh name via x. 

We are now in the position to review the labeled transition semantics of the tt- 
calculus. The (early) transition relations, {-^ : a € Act}, are defined by the rules in 
Table [TJ Note that four rules are elided from the table: the symmetric forms Sum-R, 
Par-R, Comm-R, and Close-R of Sum-L, Par-L, Comm-L, and Close-L, respectively. 

We do not discuss and illustrate the rules, and only remark that the side conditions 
in Par-L, Par-R, Close-L, Close-R, Rep-Close can always be satisfied by changing the 
object of a bound-output action. 



2.2 Behavioral equivalences 

In this subsection, we recall the notions of reduction bisimilarity, barbed bisimi- 
larity, barbed equivalence, barbed congruence, bisimilarity, and full bisimilarity of the 
vr-calculus studied in [32l |3ll HQl [331 113j. A hierarchy of them is also recorded. 



5 



Out Inp — 

xy.P ^ P x{z).P ^ P{y/z} 

TT.P^P' 

Tau Mat 



T.P ^P [x = x]Tr.P ^ P' 

P " ) p' p " ) p' 

Sum-L Par-L bn(Q;) n fn(Q) = 

P + Q^P' P\Q^P'\Q 

p , p' n n' p ^^^\ p' n n' 

P\Q^P'\Q' P\Q ^ {yz){P'\Q') 

P -^P' ^ , . ^ p ^ p> 

Res z e n(a) Open z x 

i^z)P ^ {vz)P' p> 

p " ^ p/ p ^ pi p ^ pii 

Rep- Act Rep-Comm 

\P P'\\P \P P'\P"\\P 

p ^^^^) pi p ^ p" 

Rep-Close z ^ fn(P) 

\P ^ {{i^z){P'\P"))\\P 

Table 1: Early transition rules of the 7r-calculus 



Let us begin with reduction bisimilarity. 

Definition 2.2. A relation 7^ is a reduction bisimulation if whenever (P, Q) G TZ, 

(1) P^P' implies Q^Q' for some Q' with {P', Q') eTl; 

(2) Q^Q' implies P ^ P' for some P' with (P', Q') G 7^. 
Reduction bisimilarity, denoted — , is the union of all reduction bisimulations. 

A somewhat stronger notion than reduction bisimilarity but still very weak is barbed 
bisimilarity, which takes observability into account. To express observability formally, 
we need the notion of observability predicate P Ig, where 6 is an arbitrary name or 
co-name, namely ^ G N U {a : a G N}. We say that P J,a if P can perform an input 
action with subject a; and P la if P can perform an output action with subject a. 

Definition 2.3. A relation 7^ is a barbed bisimulation if whenever (P, Q) G TZ, 

(1) P io implies Q Iq, and vice versa; 

(2) P ^P' implies Q ^ Q' for some Q' with (P', Q') G 7^; 

(3) Q ^Q' imphes P ^ P' for some P' with (P', Q') e 7^. 
Barbed bisimilarity, written ~, is the union of all barbed bisimulations. 

Based upon barbed bisimulation, we have the following definition. 

Definition 2.4. Two processes P and Q are called barbed equivalent, denoted P'^Q, if 
P|P~Q|P for any R. 

We are going to introduce barbed congruence, which is stronger than barbed equiv- 
alence. To this end, we need an auxiliary notion. 
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Definition 2.5. Process contexts C are given by the syntax 

C ::= []\7r.C + M\C\P\P\C\{uz)C\\C. 

We denote by C[P] the result of filhng the hole [ ] in the context C with the process P. 
The elementary contexts are 7r.[ ] + M, []\P, P\[], i'^z)[ ], and ![ ]. 

Now, we can make the following definition. 

Definition 2.6. Two processes P and Q are said to be barbed congruent, written P^Q, 
if C[P]~C[(5] for every process context C. 

Let us continue to define bisimilarity and an associated congruence, full bisimilarity. 

Definition 2.7. (Strong) bisimilarity is the largest symmetric relation, ~, such that 
whenever P ^ Q, P P' implies Q Q' for some Q' with P' Q' . 

Definition 2.8. Two processes P and Q are full bisimilar, written P ~ Q, if Pa ~ Qa 
for every substitution a. 

Finally, we summarize a hierarchy of the behavioral equivalences above, which is 
depicted in Figure [DJ^a) . 

Theorem 2.9. 

(1) Q ^ Q ^ Q—; each of the inclusions can be strict. 

(2) ~= ?» and ~= ~. 

For a proof of the above theorem, the reader is referred to Sections 2.1 and 2.2.1 
(Lemma 2.2.7 and Theorem 2.2.9) of [33]. We remark that barbed bisimilarity, congru- 
ence, and equivalence were introduced in [M], the basic theory of bisimilarity and full 
bisimilarity was established in [32^ [33j , and the assertion (2) of Theorem 12.91 was first 
proved in [30] . 

3 TT-calculus with noisy channels 

In the last section, we made an implicit assumption that all communication channels 
in the vr-calculus are noiseless. In the present section, such an assumption is removed 
and the vr-calculus with noisy channels, the vTTv-calculus, is explored. The first subsection 
is devoted to introducing the original formal framework of the vTTv-calculus due to Ying 
[54], which is based on the late transitional semantics of ttat. An early transitional 
semantics of ttat is proposed in Section 3.2. To cope with transitions of ttn well, we 
group the transitions according to their sources in Section 3.3. 

3.1 Late transitional semantics of ttjv 

This subsection reviews briefly some basic notions of the vTAr-calculus from [54] , 
including noisy channels and the late transitional semantics. 

A fundamental assumption in the VTTv-calculus |54j is that communication channels 
may be noisy; that is, their inputs are subject to certain disturbances in transmission. 
In other words, the communication situation is conceived as that an input is transmitted 
through a channel and the output is produced at the end of the channel, but the output 
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is often not completely determined by the input. In Shannon's information theory 
|45| . a mathematical model of channels from statistic communication theory, the noisy 
nature is usually described by a probability distribution over the output alphabet. This 
distribution of course depends on the input and in addition it may depend on the internal 
state of the channel. 

A simpler but still very valuable class of noisy channels is memoryless channels, 
on which the vrTv-calculus is based. In such channels, it is assumed that any output 
does not depend on the internal state of the channel, and moreover, the outputs of any 
two different inputs are independent. It turns out that a memoryless channel can be 
completely characterized by its channel matrix 

\p{y\x)]x,y 

where p{y\x) is the conditional probability of outputting y when the input is x, and the 
subscripts x and y run over all inputs and outputs, respectively. Clearly, p{y\x) > 0, 
and by definition, we have that '^yP{y\x) = 1 for any input x. 

The syntax of the vTAr-calculus is completely the same as that of the vr-calculus. 
The essential difference between tt^t and vr is that tttv takes the noise of communication 
channels into consideration, which means that the receiver cannot always get exactly 
what the sender delivers. As mentioned above, the noisy channels in ttat are assumed to 
be memoryless, and thus we may suppose that each name x € N has a channel matrix 

= [Px{z\y)]y,z&i 

where PxiAu) is the probability that the receiver will get the name z at the output when 
the sender emits the name y along the channel x. 

For the vr-calculus, there are two kinds of transitional semantics. In Section 2.1, the 
input rule is a transition x{z).P Pjy/z}, which expresses that x{z).P can receive 
the name y via x and evolve to P{y/z}. An action of the form xy records both the 
name used for receiving and the name received. The placeholder z is instantiated early, 
namely when the input by the receiver is inferred. Hence the name "early" semantics. 
In the literature on vr, the first way to treat the semantics for input, the late transitional 

semantics [32], adopts the input rule x{z).P i — > P, where the label x{z) contains a 
placeholder z for the name to be received, rather than the name itself. In this context, 
the input action of the form x{z) which replaces the action xy in the early transitional 
semantics can be instantiated late, that is, it can be instantiated when a communication 
is inferred. Therefore, the early and late terminology is based upon when a name 
(placeholder) is instantiated in inferring an interaction. In fact, there is a very close 
relationship between the two kinds of semantics (see, for example. Lemma 4.3.2 in [23]) 
which allows us to freely use the early or late semantics as convenient. 

Let us write Acti for the set of actions in the late transitional semantics, namely, 
Acti = {T,x{y),xy,x{y) : x,y G N}. If a = x{y), we set fn(a) = {x} and bn(a) = {y}. 
The structural operational semantics of ttat in \U^ is based upon the late transitional 
semantics and is given by a family of probabilistic transition relations ^-—^p {a E Acti i P £ 
(0,1]) displayed in Table [5J The table omits the symmetric forms of SUM-L, Par-L, 
COMM-L, and Close-L; note also that the rule IDE for agent identifiers in [54j is 
replaced by the rules Rep-Act, Rep-Comm, and Rep-Close since we are using an 
equivalent notion, replications, instead of agent identifiers in the syntax. The arrow i — >■ 
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Out — p = px{z\y)>^ Inp 



xy.P^^P ^(^).p^^p 



Tau Mat 



vr.P P' 



SuM-L 



T.P ^1 P [x = x\tt.P P' 

P + Q P' 



p^ p' 

Par-L bn(a)nfn(Q) 

P\Q^pP'\Q 



COMM-L ^ — ClOSE-L 



P\Q P'\Q'{y/z} P\Q ^p ii^z){P'\Q') 

P p' 

Open ^ y 7^ x 

{^y)P ~^p P' 

p h-!^ p' p p' 

Res — ^ z 4 n(a) Rep- Act ^ 



{yz)P v^p{yz)P' \P^pP'\\P 

P^„P' P^,P" ^ P^^.P' P^,P" 

Rep-Comm Rep-Close ^ 

!P P'\P"{y/z}\lP IP ^p {iyz){P'\P")\\P 

Table 2: Late transition rules of ttat 



a 


kind 


barb(a) 


subj(a) 


obj(a) 


n(a) 


aa 


T 


Silent 


r 









T 


xy 


Input 


X 


X 


y 


{x,y} 


xaya 


xy 


Noisy free output 


X 


X 


y 


{x,y} 


IMya 


x{y) 


Noisy bound output 


X 


X 


y 


{x,y} 


xa{ya) 



Table 3: Terminology and notation for actions 



is used to distinguish the late relations from the early, and the probability values p arise 
entirely from the noise of communication channels. The OuT rule, which represents the 
noisy nature of channels, is the unique one that all differences between ttat and vr come 
from. It means that the process xy.P of output prefix form sends the name y via the 
channel x, but what the receiver gets at the output of this channel may not be y due to 
noise residing in it, and a name z will be received with the probability px{z\y). 

3.2 Early transitional semantics of ttat 

For the vr-calculus, it turns out that the early transitional semantics is somewhat 
simpler than the late one for investigating behavioral equivalences. The reason is that 
the input action in the early semantics is instantiated early and thus we need not check 
all possible instantiations of a placeholder. In light of this, we pay our attention to the 
early transitional semantics of ttm in this subsection. This semantics is not, however, a 
direct translation of Table [21 as we will see shortly. 



9 



Out 
Tau 
Sum-L 

Comm-L 
Res 

Open-Inp 
Rep-Comm 



xy.P ^„ P 



T.P —^1 P 



" p/ 



P + Q^pP' 
P\Q P'\Q' 



P = Px{z\y) > Inp 



Mat 



Par-L 



P^P P' 



{yz)P ^p {uz)P' 



p^l P' 

{uy)P ^1 P 



P^pP' P^iP" 

\P P'\P"\\P 



Close-L 



z n(a) Open-Out 



Rep-Act 
Rep-Close 



x{z).P ^1 P{y/z} 

TT.P ^p P' 

[x = x]7r.P -^p P' 
P^p P' 

P\Q -^p P'\Q 

P^pP' Q^,Q' 
P\Q ^p {uy){P'\Q') 



p^pP' 

{vy)P ^p P' 

P^pP' 
IP -^p P'\\P 



IP^p {uy){P'\P")\lP 



Table 4: Early transition rules of ttn 



Like the late transitional semantics of ttat, the early semantics of ttn is also given in 
terms of probabilistic transition relations. A probabilistic transition in the ttn is of the 
form 

P^pQ 

where P and Q are two processes, a G Act = {T,xy,xy,x{y) : x,y & N}, and p € (0, 1]. 
The intuitive meaning of this transition is that the agent P performs action a and 
becomes Q, with probability p. It should be pointed out that although the actions 
here are the same as those in the early semantics of vr, the meanings of them are not 
completely identical. More concretely, r and xy still represent an internal action and 
an input of a name y alone channel x, respectively, but xy represents output of a name 
y via a noisy channel x that changes the intended output of some name into y with a 
certain probability, and x{y) represents output of a bound name y via a noisy channel 
x that changes the intended output of some name into y with a certain probability. 
Table [3] displays terminology and notation pertaining to the actions. Its columns list, 
respectively, the kind of an action a, the barb of a, the subject of q, the object of a, the 
set of names of a, and the effect of applying a substitution to a; some issues different 
from those of vr such as x{y)a will be explained subsequently. 

The early transition rules of ttat is present in Table [H As before, we omit the 
symmetric forms of Sum-L, Par-L, Comm-L, and Close-L. Let us make a brief discussion 
about the rationale behind the design: 

1) Since we follow the assumption of the noisy channels in [54], the Out rule is the 
same as Out in Table [21 It shows that the action performed by xy.P is not xy but xz, 
and the probability Px{z\y) that y becomes z in channel x is indicated. This is thought 
of as that noise happens at the end of sending, not at the end of receiving. 

2) All rules except for Out and Open-Inp are just simple imitations of the corre- 
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spending rules in the vr-calculus. Nevertheless, there are two differences: one is that 
a probability parameter p is taken into account, which is necessary for encoding the 
noise of channels; the other is that the side conditions in Par-L, Close-L, and Rep-Close 
are elided. The latter arises entirely from that the condition bn(a) n fn((5) = is not 
required when considering the left parallel composition P\Q. 

The reason for removing the condition bn(a) n fn((5) = arises from the following 
consideration. Recall that in ttn [M] it was supposed that free names and bound names 
are distinct. This assumption inconveniences the use of some transition rules such as 
Open-Out in our context. Recall also that in vr the side condition bn(a) fi in(Q) = of 
inferring P\Q can be easily satisfied by utilizing alpha-conversion on P. However, this 
conversion must involve the congruent equation {i'z)P = {i'w)P{w/z}, where w 
It is unfortunate that such a well known and widely used equation in the concurrency 
community seems to be impracticable for vr^v. To see this, let us examine a specific 
example. Suppose that 

Px{y\y)=po, Px{a\y)=pi, Px{b\y)=P2, 

where Po + Pi + P2 = l.We choose P =^ {i'a)xy\x{w).wz and Q '= {i'b)xy\x{'w).wz. 
Assume that {vz)P = {uw)P{w / z} with w n(P) holds in vrjv. Then it is clear that 
P = Q, and thus we can identify P with Q. By the early transition rules of ttat, we get 
without breaking the side condition bn(a) n fn((5) = that 

P -^po P -^Pi {'^a)az, P bz; 

Q -^po Q -^Pi Q -^P2 {vb)bz. 

Because {va)az and {vb)bz are inactive, while xz and bz are capable of sending z, this 
forces that pi = P2 = 0, and thus po = \. It means that the channel x is noiseless when 
outputting y; this is absurd because x and y can be taken arbitrarily, including noisy 
channels. 

In light of the previous discussion, it seems better to do away with the congruent 
equation {i'z)P = {u'w)P{w/ z}, w n(i-*). As a result, we cannot keep the side condi- 
tion bn(a)nfn((5) = 0, because otherwise the associative law among process interactions 
would be violated. To see this, one may consider the processes x{z)\{{i'y)xy\y'w) and 
{x{z)\{i'y)xy)\yw . Since the associativity is a very important property of mobile systems 
that the vr-calculus has intended to understand, we would not like to destroy it. As a 
consequence, the side conditions in Par-L, Close-L, and Rep-Close are removed, and this 
yields that the proposed early transitional semantics of vtat is somewhat different from 
that of TT when considering only noiseless channels. 

Recall also that in the vr-calculus, a private name in a process P is local, meaning it 
can be used only for communication between components within P. Such a private name 
cannot immediately be used as a port for communication between P and its environment; 
in fact, because P may rename its private names, these names are not known by the 
environment. Note, however, that not allowing the congruence {vz)P = {uw)P{w / z}, 
together with the noise of channels, makes the private names in vr^r somewhat public. 
More concretely, since a process P in vr^v cannot rename its private names, these names 
may appear in the environment of P. In addition, every name may be confused with any 
other name because of the noise of channels. Nevertheless, private names are needed 
in vrAT since a private name, say z, can at least be used to preclude a process from 
communicating with its environment via the port z. 
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3) An Open-Inp rule is added. This arises from two aspects of consideration: One 
is that if a channel is capable of inputting, then it should have the ability of arbitrary 
inputting. In other words, if P Q, then restricting y to P should not prevent the 
channel x from inputting y. The other aspect is that if an agent can receive a name 
from outside, then the name may be thought of as open and the scope of the restriction 
may be extended. Technically, the Open-Inp rule derives from the invalidation of the 
congruent equation {i'z)P = {i'w)P{w / z}, w n(P), because without the equation, 
bound names cannot be changed and the free name in an input may clash with bound 
names. We remark that such a rule is not necessary in the 7r-calculus, since all the 
bound names in vr can be renamed by alpha-conversion. 

Let us continue introducing some notions. As in vr, the input prefix x{z) and the 
restriction {vz) bind the name z. In view of 2) above, in the TTAr-calculus we need to 
differentiate between the bound names in {i'z).Q and x{z).Q. A bound name z is called 
strongly bound in P if it lies within some sub-term x{z).Q of P. As shown in Definition 
13.31 (1), we permit of changing a strongly bound name into a fresh name, which is called 
strong alpha-conversion. Any bound name that is not strongly bound is said to be 
weakly bound. An occurrence of a name in a process of vr^v is free if it is not bound. 
For instance, in P '= {vs)x{z).{vz)yz.xs, the name s is weakly bound, z is strongly 
bound, and x and y are free. We denote the free names, bound names, strongly bound 
names, and weakly bound names in a process P by fn(P), bn(P), sbn(P), and wbn(P), 
respectively. 

We now define the effect of applying a substitution cr to a process P in vrjv. Since 
weakly bound names cannot be converted, the process Pa is P where all free names 
and weakly bound names x are replaced by xo", with strong alpha-conversion wherever 
needed to avoid captures. This means that strongly bound names are changed such 
that whenever x is replaced by xa then the so obtained occurrence of xa is not strongly 
bound. For instance, 

{a{x).{vb)xb.cy.Q){x.,c/y.,b} = a[z).{i'c)'zc.cx.Q. 

Clearly, according to the above definition of substitution, we have the following fact. 

Lemma 3.1. For any substitution u, 

(1) Oo- = 0; 

(2) {■K.P)a = ira.Pa; 

(3) {P + Q)a = Pa + Qa; 

(4) iP\Q)a = Pa\Qa; 

(5) {{iyz)P)a = {vza)Pa] 

(6) {\P)a=\P(T. 

Since the notion of free names is not sufficient for defining structural congruence, we 
introduce an extended notion of free names. Motivated by a similar notion in [5l], we 
define the set of noisy free names to be the set of all free names in a process and those 
names produced by noise when sending free names. Formally, we have the following. 
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Definition 3.2. The set of noisy free names, denoted fn*(P), is defined inductively as 
follows: 

(1) fn*(0) = 0; 

(2) fn*(xy.P) = {x} U {z G N : Pcciz\y) > 0} U fn*(P); 

(3) in*{x(z).P) = {x} uU,eN(fn*(nyM)\{2/}); 

(4) fn*(r.P) =fn*(P); 

(5) fn*{[x = y]TT.P) = {x,y}Ufn*(7r.P); 

(6) fn*(P + P') = {n*{P\P') = fn*(P) U fn*(P'); 

(7) fn*((z.z)P)=fn*(P)\{z}; 

(8) fn*(!P) = fn*(P). 

Although fn*(P) is an extension of fn(P), it is not necessarily that fn*(P) ^ fn(P). 
For example, assume that Pxiz\y) = 1- Then we see that fn*(xy.O) = {x,z}, while 
fn(xy.O) = {x, y}. If it is required that Px{y\y) > for all x, y € N, then we indeed have 
that fn*(P) D fn(P). 

We can now define structural congruence as follows. 

Definition 3.3. Two process expressions P and Q in the vTAr-calculus are structurally 
congruent, denoted P = Q, if we can transform one into the other by using the following 
equations (in either direction): 

(1) x(z).P = x{w).P{w/ z} if w is fresh in P. 

(2) Reordering of terms in a summation. 

(3) M + = M, P\0 = P, P\Q = Q\P, and P\{Q\R) = {P\Q)\R. 

(4) {uz){P\Q) = P\{uz)Q \iz^ fn*(P), {vz)0 = 0, and {vz){vw)P = {vw){vz)P. 

(5) [x = x]7r.P = vr.P. 

(6) [x = y]vr.P = if X and y are distinct. 

(7) \P = P\\P. 

The noisy free names of two structurally congruent processes are clearly related by 
the following fact. 

Lemma 3.4. If P = Q can be inferred without using (5) and (6) in Definition 13. 3^ then 

fn*(P) = fn*(Q). 

We also make an observation on the noisy free names of processes appearing in the 
same transition. 

Lemma 3.5. Let P —^p P' be a transition in vttv. 
(1) If a = xy, then x,y G fn*(P) and fn*(P') C fn*(P). 
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(2) If a = xy, then x G fn*(P) and fn*(P') C fn*(P,y). 



(3) If a = then x £ fn*(P) and fn*(P') C fn*(P,y). 

(4) If a = r, then fn*(P') C fn*(P). 

Proof. The proof is carried out by induction on the depth of inference P —^p P' ■ We 
need to consider all kinds of transition rules that are possible as the last rule in deriving 
P — — >p P' ■ The assertions (1) and (2) can be verified directly, the proof of (3) needs 
(1), and the proof of (4) needs the first three. This is a long but routine case analysis, 
so the details are omitted. □ 

We end this subsection by providing some image-finiteness properties of probabilistic 
transitions. To this end, we suppose that outputting a name can only gives rise to finite 
noisy names, that is, we adopt the following convention: 

Convention 3.6. For any x,y € N, the set {yi : PxiUilu) > 0} is finite. 

The following facts about input and output actions are the corresponding results of 
Lemmas 1.4.4 and 1.4.5 in 1431. 



Lemma 3.7. 

(1) If P ^1 P' and y fn(P) U wbn(P), then P P'{z/y} for any z. 

(2) If P ^1 P' and z ^ fn(P) U wbn(P), then there is P" such that P P" and 
P"{y/z} = P'. 

(3) For any P and x, there exist Pi, . . . , P„ and y fii(P) U wbn(P) such that if 
P — >i P' then P' = Pi{z/y} for some Pj. 

(4) For any P, there are only finitely many x such that P P' for some y and 

P'. 

Proof. The first two assertions can be easily proved by induction on inference, and the 
last two by induction on P. □ 

Similar to the above, we have a result about output actions. 
Lemma 3.8. 

(1) For any P, there are only finitely many quadruples x, y,p, P' such that P P'. 

(2) For any P, there are only finitely many quadruples x, y,p, P' such that P P' . 

Proof. All the two assertions are proved by induction on P. The proof of (1) needs 
Convention 13.61 and the proof of (2) uses the fact that weakly bound names cannot be 
converted. □ 



3.3 Transition groups of tttv 

In the last subsection, the primitive transition rules of ttat have been established. 
A closer examination, however, shows that at least two confusions may arise from the 
presentation of these rules. To avoid this, we introduce another presentation, transition 
groups, in this subsection. 
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To illustrate our motivation, let us consider a simple example: Take P = xy + xz, 
and suppose that 



p,{y\y) = 0.7, p,{z\y) = 0.1, p,{s\y) = 0.1, p,{t\y) = 0.1; 
Px{y\z) = 0.5, Px{z\z) = 0.3, Px{s\z) = 0.1, Px{w\z) = 0.1. 

By the transition rules of ttat, we see that 

P ^0.7 0, P ^0.5 0, P ^0.1 0, and P ^o.i 0. 

At this point, two confusions arise: One is that there are two probabilistic transitions 

P — >o.7 and P — ^o.5 with the same source and target processes and the same 
action, but different probability values. In [;54j, it is thought that the probability of 

transition P is either 0.7 or 0.5, but which of them is not exactly known and the 
choice between 0.7 and 0.5 is made by the environment. This understanding that comes 
from the idea of imprecise probability studied widely by the communities of Statistics 
and Artificial Intelligence (see, for example, [49]) is very natural. The limit is that more 
uncertainties are involved in inference. Another way to deal with this problem in the 
literature on probabilistic processes is to modify probabilistic transition systems. This 
is done by adding up all possible values of transition probability with the same source 
and target agents and the same action, and then normalizing them if necessary (for 
instance, see |47 t \2Q \ H8 | I51j). Once again, this kind of modification highly complicates 
the theory of probabilistic processes. 

The other confusion is that the information on the origins of some probabilistic 
transitions is lost. As for the above example, the information that P — >o.i derives 
from the first sub-term of P is lost. In addition, we cannot determine from which the 
transition P -^o.i arises. 

There is a convenient presentation for alleviating the confusions. In fact, we may 
group all transitions having the same origin. Regarding the example above, we may say 
that P has two transition groups 

Pi^o.iO, ^o.iO, ^o.iO, ^o.iO} and Pj^o.sO, ^o.aO, ^o.iO, ^o.iO}. 

def _ _ _ _ 

Notice that the agent P = xy + xz has a nondeterministic choice between xy and xz, 
and it is usually thought that such a choice is made by the environment, so we may think 
that the choice between the transition groups is also made by the environment. In this 
way, the first confusion is completely excluded, and if we have observed an output xt and 
the environment does not change her choice, then the process has a smaller probability 
of outputting xz and the output xs arises necessarily from the first sub-term of P. 
In general, we use 

P{ ^PiQi}ieI 

to represent a group of probabilistic transitions P-^p^Qi, i € I, satisfying YlieiPi — 
P{-^p.Qi}i(zj is called a transition group. We omit the indexing set / whenever / is a 
singleton. In fact, some representations analogous to the transition group have already 
been used in the literature (see, for example, [HI [201 HBJ [15] ) . 
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To manipulate transition groups, we need the operator l±) defined as follows: 



r ai , ,r /3 1 {^ft+pQJie/' if Q = and /3 = Oi for some i 

[ { — 'p^Qiiiei U { — >pQ}, otherwise; 

{-^P^QJie/ W {-^PjQj}jeJ = {{-^P^Qi}iei ^ {-^PjQj}) ^ {-^PkQk}keJ\{j}- 

Moveover, if in the same transition group, there are P—^p^Qi and P — ^-^p^Qj with 

Oj = Oj and Qi = Qj, then we sometimes combine them into a single one P—^pi+pjQi 

and delete j from the indexing set /. For instance, the transition groups P{—^oaQ} W 

{— ^o.eQ}; P{—^oaQ, —^o.gQ}, and P{^^iQ} mean the same thing. 
The following result is helpful to group the transitions of vtat. 

Lemma 3.9. Let P{—^piQi}iei be a transition group derived from the early transition 
rules of vTjv in Tabled Then all Oj, z € /, have the same barb. 

Proof. It is obvious by the inference rules in the transitional semantics of vttv- □ 

In light of Lemma 13.91 can say that a transition group has a barb, which is 
defined as the common barb arising from the actions of probabilistic transitions in the 
transition group. A transition group is called an output transition group (respectively, 
input transition group) if its barb is of the form x (respectively, x). 

Using Lemma 13.91 the transition rules in Table U] are grouped in Table [5l 

For later need, we introduce one more notation. A function fj, from Q to the closed 
unit interval [0,1] is called a probability distribution on if Y2xen ~ ^- ^(^) 
we denote the set of all probability distributions on the set 0. If /u G ^^{Q x P), cj G il, 
and 5 C r, we define fi{u), S) = ^^gg /u(w, s). 

Observe that each transition group, say P{-^p.Qi}i^i , gives rise to a probabilistic 
distribution /i on Act x Proc, where fi is defined by 



fJ.{a,Q) 



p, if P-^pQ belongs to P{-^p,Qi}iGi 
0, otherwise. 



Therefore, we sometimes write P — > ^ or P ^— ^ fj, for P{-^p.Qi}jG7, where 

barb(aj) is the barb of the transition group. 

We end this subsection with two properties of transition groups. The first one 
corresponds to the image-finiteness of transition relations in vr. Here, by image-finiteness 
we mean that for any process P and action a in vr, there are only finitely many processes 
Q such that P-^Q. 

Lemma 3.10. Keep Convention 13.61 Then for every a G Act and P G Proc, the set 

{^[{ojxProc '■ P ^ f-} 

is finite, where ^J'\{a}xProc is the restriction of fi to {a} x Proc. 

Proof. It follows immediately from Lemmas 13.71 and 13.81 □ 

The other property of transition groups is concerned with applying substitution to 
transitions. To state it, we need the next definition. 
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i^T I = {i:pi= Px{yi\y) > 0} Tau — — ^ — 

xy.P{^p^ r.P{— >! P} 

Inp Mat ^-^i— ..^^W 

Sum-L ^^^i^^ ^"^'^^ Pax-L ^'^^'^^ 



Comm-L 



P + Q{^p, Pi}i^i P\Q{^Pi Pi\Q}iei 

P{^P. nhel' a {^P. P^}^^I" Q{^1 Qi} 

P\Q{^p, PilQiher W {^p, HiKPimhei" 



Res-Out - "^^''"Zf^'' '^^^ 

{vyj)P{^Pi {i'yj)Pi}ia'\{j} ^ {^^pi {^yj)Pi}ia"\{3} ^ {— Pj) 

Res-Inp ^'^ z^x.y Res-Tau ^"^'^^ 

{yz)P{^r {uz)P'] {vz)P{^p, {uz)Pi}ia 

Open-Inp ^^^'^'^ y ^ x Rep-Act ^i"^^- ^^^^^^ 

P'} \P{^p^ P.|!PW 

Rep-Comm ^{^.^ ^^.e. « P.W" ^0 



Table 5: Transition group rules of ttat 
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Definition 3.11. 

(1) A substitution a is said to be consistent with weakly bound names of a process 
P if zcT G wbn(Pc7) implies z ^ fn*(P). 

(2) A substitution a is said to be compatible with a channel x € N if for any y, z € N 
it holds that 

Pxa{u\ya) = ^ Px{z\y). 

zu=u 

We remark that the definition of compatibility here is a special case of Definition 
1 in [53]. A transition group under a consistent and compatible substitution has the 
following property. 

Proposition 3.12. Let Pi}i£i be a transition group. Suppose that a is a 

substitution satisfying the following conditions: 

1) (7 is consistent with weakly bound names of all processes appearing in the inference 
for deriving the transition group; 

2) a is compatible with the subjects of output actions appearing in the inference for 
deriving the transition group. 

Then, there is a transition group Pa{^^p. Pjcrjjg/. 

Proof. It follows from a case by case check of all possible transition groups P{—^pi 
Pjjjg/. The condition 1) is used to compute probability of Pa Pjcr, and the condition 
2) is required when restricting P. We only consider the case of Out and omit the 
remainder. In the case of Out, we may assume that P = xy.R, PxiVilv) = Pi, cii = xyi, 
and Pi = R. Then the transition group is xy.R{^^^p^ R}iei- This gives a transition 

group 'xaya.Ra{ — Ra}j^j by the definition of substitution, where J = {j ■ Qj = 
Pxaiujlyo') > 0}. It follows from the condition 2) that 

qj = Pxa{uj\ya) = ^ Px{yi\y) = ^Px{yi\y) = ^Pi, 

yi(T=Uj ielj i^Ij 

where Ij = {i E / : yia = Uj}. Therefore, 

PfT{-^p. PjO-jjg/ = 'xay(T.Ra\^-^p^ R(y}iei 

= xaya.Ra{ — ^^^^^^ i^ajjgj 

= xaya.Ra{ — Rcrjjajj 
as desired. □ 

4 Barbed equivalence 

Having built the transition group rules, we can now turn to several behavioral equiv- 
alences in vTjv. As mentioned in the last section, collecting the probabilistic transitions 
arising from a noisy channel into a group can alleviate some confusions, so the transi- 
tion group provides a useful way of defining behavioral equivalences. Of course, other 
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ways which do not use the transition group are possible (for example, Definition 4 in 
|54j). Recall that in ttm two kinds of actions, noisy free output xy and noisy bound 
output x{y), have the same barb x. Clearly, not all observers can detect whether an 
emitted name is bound. It is therefore natural to ask what is the efi^ect of reducing 
this discriminatory power. In this section, the concepts about behavioral equivalences 
are based upon the assumption that the observer is limited to seeing whether an action 
is enabled on a given channel; behavioral equivalences with a more powerful observer 
will be studied in the next section. Because the behavior of a process in ttat is evidently 
dependent on the noise probability distribution, it is better to parameterize a behavioral 
equivalence with the noise. However, for simplicity we assume that all processes in a 
definition of behavioral equivalence are considered under the same noisy environment, 
that is, the channel matrix of every name is fixed. 

Let us start with some basic notions. The transitive closure of a binary relation 
TZ on Proc is the minimal transitive relation TZ* on Proc that contains TZ, that is, if 
{P,Q) € TZ*, then there exist Po,...,Pn G Proc satisfying that P = Pq, Q = Pn, 
and £ TZ ioic i = 1, . . . ,n. Thus, if TZ and S are two equivalence relations 

on Proc, then so is {TZU S)* . It turns out that {TZU S)* is the smallest equivalence 
relation containing both TZ and S. For any equivalence relation TZ on Proc, we denote 
by Proc/ TZ the set of equivalence classes induced by TZ. 

The definition below only takes the internal action into account. 

Definition 4.1. An equivalence relation TZ on Proc is a reduction bisimulation if when- 
ever (P, Q) £ TZ, P /i implies Q rj for some r] satisfying /j,{t, C) = ?7(r, C) for 
any C G Proc/TZ. 

Note that the above reduction bisimulation and also other subsequent notions on 
behavioral equivalences are defined in the same style as Larsen-Skou's probabilistic 
bisimulation ^26j, that is, the probabilities of reaching an equivalence class have to 
be computed. Recall that in a non-probabilistic setting we simply require that P P' 
implies Q Q' and {P',Q') G TZ, that is, it is enough that the agent Q has a possi- 
bility to imitate the step of the agent P. However, if we work in a probabilistic setting, 
in addition to need that the second agent is able to imitate the first one, it is also rea- 
sonable to require that he does it with the same probability. In other words, we have to 
consider all the possible ways to imitate the execution of the action, and thus we have to 
add the probabilities associated with these possibilities. Correspondingly, summing up 
the probabilities of reaching an equivalence class replaces the condition {P' ,Q') G 7^ in 
a non-probabilistic setting. It should be noted that the treatment of probabilities here 
is slightly different from that of A-bisimulation in [54], where a higher probability of an 
action is allowed to simulate the same action. In the literature, lumping equivalence, a 
notion on Markov chains to aggregate state spaces [141 [2T] , was also defined by summing 
up the probabilities of reaching an equivalence class; it needs not to consider the labels 
of transitions and is different from our definitions on behavioral equivalences in vrjv. 

Because the union of equivalence relations may not be an equivalence relation, unlike 
in TT, the union of reduction bisimulations is not a reduction bisimulation in general. 
Nevertheless, we have the following result. 

Proposition 4.2. Let — = (Uj^«)*> where TZi is a reduction bisimulation on Proc. 
Then — is the largest reduction bisimulation on Proc. 



19 



Proof. It suffices to show that — is a reduction bisimulation on Proc. Suppose that 
{P, Q) S— and P r]Q. Then there are Pq, . . . ,Pn G Proc and reduction bisimulations 
TZy , . . . ,TZn' such that P = Pq, Q = Pn, and {Pi-i,Pi) E TZi' for i = l,...,n. By 
definition, there exist r]i,...,rjn such that Pi — > rji and r]i-i{T,Ci') = r]i{T,Ci') for 
i = 1, . . . ,n and any C,/ € Proc/TZi'. Note that for any C € Proc/ — and T^-j/, it fohows 
from T^i/ that C = \JjCiij for some Ci'j G Proc/TZi', and moreover, IJj ^ 
disjoint union since every Ci'j is an equivalence class. We thus have that 

??i-i(r,C) = ??i_i(T,|JCi/j) 

j 

i 
j 

for each i = 1,... ,n. This means that r]Q{T,C) = r]n{T,C). Hence, — is a reduction 
bisimulation, as desired. □ 

The reduction bisimulation — is called reduction bisimilarity. In other words, P and 
Q are reduction bisimilar if (P, Q) ^TZ for some reduction bisimulation TZ. 

As a process equivalence, reduction bisimilarity is seriously defective. For example, 
it relates any two processes that have no internal actions, such as xa and ya. To obtain 
a satisfactory process equivalence, it is therefore necessary to allow more to be observed 
of processes. In the sequel, we use 9 to rang over barbs but r. Based upon Lemma 13.91 
we have the following definition. 

Definition 4.3. The observability predicate Ig in the vTAr-calculus is defined as follows: 

(1) P la if P has an input transition group with subject a. 

(2) P la if P has an output transition group with subject a. 

Taking observability into consideration, we modify the notion of reduction bisimu- 
lation as follows. 

Definition 4.4. An equivalence relation TZ on Proc is a (strong) barbed bisimulation if 
whenever (P, Q) £ TZ, 

(1) P le implies Q |e; 

(2) P — > fj, implies Q — > rj for some r] satisfying ij,{t, C) = r]{T, C) for any C G 
Proc/TZ. 

Analogous to Proposition 14.21 we have the following fact. 

Proposition 4.5. Let ~ = (|Jj TZi)*, where TZi is a barbed bisimulation on Proc. Then 
~ is the largest barbed bisimulation on Proc. 

Proof. Since barbed bisimulations are reduction bisimulations, we see that ~ is a reduc- 
tion bisimulation by Proposition 14.21 For any {P,Q) G ~, it is clear that P Ig implies 
Q Ig. Thereby, ~ is a barbed bisimulation, and moreover, it is the largest one since it 
includes all barbed bisimulations on Proc. □ 
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The barbed bisimulation ~ is called (strong) barbed bisimilarity; we say that P and Q 
are (strong) barbed bisimilar, denoted P'^Q, if {P,Q) £ 'R- for some barbed bisimulation 
TZ. It follows readily from definition that barbed bisimilarity is properly included in 
reduction bisimilarity. In addition, the fact below is also obvious. 

Lemma 4.6. U P = Q, then P^Q. 

Like reduction bisimilarity, barbed bisimilarity is not satisfactory as a process equiv- 
alence as well. Nevertheless, it will underpin two good relations, barbed equivalence and 
barbed congruence. Let us begin with barbed equivalence. 

Definition 4.7. Two processes P and Q in ttn are called (strong) barbed equivalent, 
denoted P^Q, if P\R'^Q\R for any R. 

It follows directly from the above definition that C ~. On the other hand, there are 
a large number of counter-examples to show that ~ ^ fi. For example, if P =^ xa.yb and 

def _ 

Q = xa, then for any channel matrix of x, wc have that P^Q by definition. However, 
if one takes R =^ x{w), then there exists P\R{^—fi yb}, and moreover, it cannot be 
matched hy Q\R because the unique transition group Q\R{—^i 0} having T as barb 
yields yb'j^O. Hence, P\R^Q\R does not hold. 

Further, we have the following fact that will be of use later. 

Lemma 4.8. 

(1) If PiiQ, then {uz){P\R)^{iyz){Q\R) for any R and z. 

(2) Let S be an equivalence relation included in ~. If for any R and z, {P, Q) & S 
implies {{iyz){P\R), {iyz){Q\R)) £ S, then S ^ ^. 

Proof. For (1), assume that PkQ. By definition, we see that P\Rk.Q\R for any R. 
Moreover, it is straightforward to show that {i'z)P^{i'z)Q for any z. Therefore, the 
assertion (1) holds. 

For (2), suppose that (P, Q) G S. Then we see by the hypothesis of S that for any R, 
{P\R, Q\R) G 5 C ~. Hence, P\R'^Q\R for any R. So P^Q, and thus <S C ~, finishing 
the proof. □ 

Finally, we introduce the concept of barbed congruence. 

Definition 4.9. Two processes P and Q in ttn are (strong) barbed congruent, denoted 
P^Q, if C[P]~C[(5] for every process context C. 

In other words, two terms are barbed congruent if the agents obtained by placing 
them into an arbitrary context are barbed bisimilar. The following remark clarifies the 
relationship between barbed equivalence and barbed congruence 

Remark 4.10. By definition, we see that barbed congruent processes in the VTAr-calculus 
are barbed equivalent, namely, ~ C «. In fact, this inclusion is strict. The following 
example serves: 

Let us take P =^ x{w).[w = y]T and Q =^ x{w).[w = z]t, and suppose that all 
communication channels, except for x, are noiseless. We also assume that the channel 
matrix of x is given by 

Px{y\y) = 0.5, Px{z\y) = 0.5; 

Pxiy\z)=0.5, px{z\z) = 0.5; 
Pxis\s) = 1 for any s y^y,z. 
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It follows readily that for any R G Proc with R{ — ^p. R'j^ji^j, if 
{xy,xz,x{y),x{z)}, then P|i?~Q|i2. Moreover, if there exists oij G {xy,X2,x(y),x(2;)}, 
then any transition group of R having Oi as an action must be one of the following 
forms: 

(1) R{^o.5R'i}^{^o.5R'i}; 

(2) Rf-Ho.5R'2}^{^o.5ii^y)R'2}; 

(3) i?{^o.5Mi?aW{^0.5i?3}; 

(4) i?{^o.5 w {^0.5 {iyy)K}. 
For the form (1), we have that 

P\R{^o.5 r\R[} W {^0.5 R'l} and 
Q\R{^o.5r\R[}bi{^o.5R'i}, 
which means that P\R^Q\R. For the form (2), we have that 

P\R{^0.5 H){r\R2)} W {^0.5 {iyy)R2} and 
Q\R{^o.5 r\{iyy)R'^} b {^o.5 ^i^a}- 

This yields that P\R'^Q\R because of (i^y)(r|i?2) = T|(z^y)-R2- The form (3) is similar 
to that of the form (2), and we can also get that P\R^Q\R. For the form (4), we see 
that 

P\R{^o.5 iuy){T\{uz)R'^)} m {^0.5 H,z)R'4} and 
Q\R{^o.5 M(T|(z/j/)i?^)}w{^o.5 i^y,z)R'^}. 

Because {i'y){T\{uz)R'^) = T\{vy,z)R'^ = {uz){T\{i'y)R'^), we get that P\R'^Q\R. Sum- 
marily, we have that P\R^Q\R for any R, and thus P^Q. 

On the other hand, let C = x{y).[ \\xs.xs. Then C[P] = x{y).x{w).[w = tj\T\xs.xs 
and C[Q] = x{y).x{w).[w = z]t\xs.xs. It is easy to check that C[P]'^C[Q], and thus 
P6iQ does not hold, as desired. □ 

5 Bisimilarity 

As mentioned in the last section, behavioral equivalences under a powerful observer 
that can differentiate between noisy free output and noisy bound output are investigated 
in this section. 

We begin with a classical notion, bisimulation. 

Definition 5.1. An equivalence relation TZ on Proc is a (strong) bisimulation if when- 
ever (P, Q) & TZ, P — > n implies Q — > rj for some rj satisfying (^{a, C) = r]{a, C) for 
any a G Act and C G Proc/TZ. 

The next result gives the largest bisimulation. 

Proposition 5.2. Let ~= {{J^'R-i)*, where TZi is a bisimulation on Proc. Then ^ is 
the largest bisimulation on Proc. 
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Proof. It is similar to that of Proposition 14. 2[ 



□ 



The largest bisimulation ~ is called (strong) bisimilarity. In other words, P and Q 
are (strong) bisimilar, written P ~ Q, if {P,Q) G TZ for some bisimulation IZ. As an 
immediate consequence of Definitions 14.41 and 15.11 we have the following. 

Lemma 5.3. Any two bisimilar processes are barbed bisimilar, i.e., ~C ~. 

The remark below tells us that bisimilarity is not included in barbed congruence. 

Remark 5.4. Just like in the vr-calculus, bisimilar processes in the vTTv-calculus may not 
be barbed congruent, that is, ~^ ~. The following counter-example serves: Let P '= 
au\h{v) and Q *== au.b{v) + h{v).au, and suppose, for simplicity, that there is a channel 

X with px{h\b) = 1. Then we see that P Q. However, the context C *== (x(a).[ \)\xb 
yields that C[P]'^C[Q]. Therefore, P^Q does not hold. □ 

The following notion will provide an equivalent characterization of bisimilarity. 

Definition 5.5. A family of binary relations 

on Pvoc stratifying the bisimilarity is 

defined inductively as follows: 

(1) ~o is the universal relation on processes. 

(2) For any < n < oo, (P, Q) G~„ if 

(2.1) P — > fi implies Q — > r] for some r] satisfying ^(a,C„_i) 
any a G Act and C„_i G Procj ~n-ii and 

(2.2) Q — > 7] implies P — > fj, for some fi satisfying fi{a,Cn-i) 
any a G Act and C„_i G Procj ^n-\- 

(3) (P, Q) G~oo if [P. Q) G~n for all n < oo. 

Observe that every ~„ is an equivalence relation, so the notation Procj ~n-i in the 
above definition makes sense. Note also that ~0i ^i-, - ■ ■ ■, ^oo is a decreasing sequence of 
relations. 

The result below gives another way to check bisimilarity. 
Proposition 5.6. P ~ Q if and only if P ~oo Q- 

Proof. We first prove the necessity. By definition, we only need to show that ~C~„ 
for all n < oo. Proceed by induction on n. The case n = is trivial. Assume that 
'~C~^_]^. For any (P, Q) G~ and P — > fi, it follows from the definition of ~ that there 
exists r] such that Q — > r] and ^{a,C) = r]{a,C) for any a G Act and C G Procj ~. 
By induction hypothesis we see that //(a, Cn-i) = r]{a, C„_i) for any a G Act 

and Cn-i G Procj ~n-i- Consequently, as desired. 

Now, let us show the sufficiency. It is enough to prove that 

^s a bisimulation. 

Suppose that P ~oo Q and P — > fi. Then for each n < oo, there is such that 
Q — > r]n and fi{a,Cn) = r]n{a,Cn) for any a G Act and C„ G Procj By Lemma 
13.101 the number of distinct r]nS is finite, so there is r]' such that rj' = rjn for infinitely 
many n. Since ~0; '^i; • • • > '^oo is a decreasing sequence of equivalence relations, we get 
that fj,{a,Cn) = r]'{a,Cn) for any C„ G Procj ~n. This gives rise to {P,Q) G~n for all 
n < oo, which means that (P, Q) G '^QQ. Therefore, ^^oo ^s a bisimulation, finishing the 
proof. □ 



= r]{a,Cn-i) for 
= 7]{a,Cn-i) for 



23 



For later need, let us pause to develop a "bisimulation up to" technique. Firstly, we 
make the following definition. 



Definition 5.7. A binary symmetric relation on Proc is a bisimulation up to ~ if 
whenever (P, Q) gTZ, P — > fi implies Q — > rj for some rj satisfying fi{a, C) = r]{a, C) 
for any a e Act and C G Proc/{TZU ~)*. 

The following fact shows that any bisimulation up to ~ relation is a bisimulation, 

as expected. 

Proposition 5.8. If 7^ is a bisimulation up to then TZ C~. 

Proof. Let S = (7^U ~)*. For any (P, Q) G S, there exist Pq, • • • , such that Pq = P, 
Pn = Q, and (Pi-i, Pi) G 7^U - for i = 1, . . . , n. If (P^-i, Pi) G 7^, then P^.i — ^ m^i 
implies Pj — ^ /Xj for some /Xj satisfying //j_i(a, C) = /^^(q;, C) for any a G ^rf and C G 
Proc/S. If (Pj_i,Pj) G~, then Pi_i — > implies Pj — > fii for some /^j satisfying 
IJ,i-i{a,C') = Hi{a,C') for any a G ^ct and C' G Proc/ ^. This, together with the 
fact ~C S, yields that /ii_i(a,C) = iJ,i{a,C) for any a G Act and C G Proc/S. As a 
result, for any Pq — ^ /xq, there are //i, . . . , such that for i = 1, . . . , n, P^ — >■ ^Uj and 
C) = /Uj(a, C) for any a G ^ct and C G Proc/S. Therefore, <S is a bisimulation, 
and thus 7^ C~. This completes the proof. □ 

We now establish a bisimulation up to ~ relation which will be used in the next 
section. 

Lemma 5.9. Let 

TZ = {((i/i)(P|P), {uT){Q\R)) : z are arbitrary names, and P,Q,R E Proc with P ^ Q}. 
Then 7?. is a bisimulation up to ~. 

Proof. Clearly, TZ is an equivalence relation. To check that it is a bisimulation up to ~, 

we appeal to a case analysis on the last rules applied in the inference of related tran- 
sitions. It needs to examine all inductive steps through combinations of the transition 
group rules of Par, Comm, Res-Out, Res-Inp, Res-Tau, and Open-Inp. This is a long 
and routine argument, so we omit the details here. □ 

To obtain a congruence based on actions, we make the following definition. 

Definition 5.10. Two processes P and Q in ttn are called (strong) full bisimilar, de- 
noted P c^^ Q, if Per ~ Qcr for any substitution a. 

Like in tt, bisimilarity in ttn is not preserved by substitution, as illustrated below. 

Remark 5.11. It follows immediately from definition that full bisimilar processes are 
necessarily bisimilar, i.e., ~C~. Nevertheless, In other words, there are some 

bisimilar processes that are not full bisimilar. For example, let P au\b{v) and Q 
au.b{v) + b{v).au. Then for any noisy channels, we always have that P Q. However, 
the substitution a defined by 



gives rise to that Pa = au\a{v) and Qa = au.a{y) + a{v).au. Obviously, Pa oo Qa, and 




a, if X = b 
X, otherwise 



thus P and Q are not full bisimilar. 



□ 



24 



6 A hierarchy of behavioral equivalences 

In the previous two sections, we have introduced several behavioral equivalences. 
Some simple inclusion relationships among them have been established. In this sec- 
tion, we consummate the relationships and then give a hierarchy of these behavioral 
equivalences. 

The following theorem shows that bisimilar processes are barbed equivalent. 

Theorem 6.1. For any two processes P and Q in tt/vt, if P ~ Q, then P^Q. 

Proof. By Lemmas 15.81 and 15. 9| we see that P ^ Q implies {i'z){P\R) ~ {i'z){Q\R) for 
any R and z. Using the fact ri^ obtained in Lemma 15.3^ we get from Lemma 14.81 (2) 
that ~C pa, thus finishing the proof. □ 

Remark 6.2. In the vr-calculus, it is well known that strong barbed equivalence coin- 
cides with strong bisimilarity; see, for example, Theorem 2.2.9 in [43J. However, in the 
TTAT-calculus the converse of the above theorem is not true in general. In other words, 
two barbed equivalent processes may not be bisimilar. For example, let us consider the 

barbed equivalent processes P =^ x{'w).['w = y]r and Q =^ x{'w).['w = z]t in Remark 
14. 10^ and keep the hypothesis of related channel matrices. Then we find that 

P{^i t} and Q{^i 0}. 

This shows us that P oo Q. Obviously, this non-coincidence of barbed equivalence and 
bisimilarity arises from the noise of channel x. □ 

We continue to discuss the relationship between barbed congruence and full bisimi- 
larity. To this end, we need one more concept. 

Definition 6.3. An equivalence relation TZ on processes is said to be a process congru- 
ence if (P, Q) £ TZ implies (C[P],C[Q]) G TZ for every process context C. 

The following is an easy consequence, which is useful for checking process congruence. 

Proposition 6.4. An equivalence relation 7^ is a process congruence if and only if it is 
preserved by all elementary contexts. 

The next observation gives a basic process congruence; its proof follows immediately 
from the definition of structural congruence. 

Proposition 6.5. The structural congruence = is a process congruence. 

As an immediate consequence of Definition 14. 9^ Proposition 16. 5^ and Lemma 14.61 we 
have the following. 

Corollary 6.6. If P = Q, then P~Q. 

For subsequent need, we show that ~ is also a process congruence. 

Lemma 6.7. ~ is a process congruence, and moreover, it is the largest process congru- 
ence included in ~. 
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Proof. We first show that ~ is a process congruence. Suppose that P ^ Q, i.e., Pa ~ Qa 
for every substitution a. By Proposition \<jA\ we only need to prove that for every 
elementary context C and any substitution a, C[Pa] ~ C[Qo']- For C = 7r.[ ] + M, if 
the prefix vr is of form xy, t, oi [x = yjir, then it follows directly from Pa ~ Qa that 
C[Pa] ~ C[Qa]. In the case C = x{z).[ ] + M, we see that C[Pa] = x{z).Pa + M and 
C[(5(j] = x{z).Qa + M. Because z is not strongly bound in Pa or Qa, we get by P ~ Q 
that for any z' , Pa{z'/z} ~ Qa{z'/z}. This gives rise to x{z).Pa ~ x{z).Qa, and 
thus C[P(t] ~ C[Qa]. By carrying out an analysis of the transition group rules related 
to composition, restriction, and replication, it is routine to check that C[Pa] ~ C[Qa] 
holds for the other four elementary contexts, and we do not go into the details. 

By definition, we see that ~C~. We now verify that ~ is the largest process congru- 
ence included in ~. Let ~* be an arbitrary process congruence included in ~. Suppose 
that P ~* Q and a = {yi, . . . ,yn/xi, . . . ,Xn}- Without loss of generality, we assume 
that there is a noiseless channel s with s fn*{Pa,Qa), and set 

C =^ ius){syi syn\s{xi) s(x„).[ ]). 

Then C[P] ~* C[Q], hence C[P] ~ C[Q]. Notice that C[P]{(^i)"(z^s)P(J = Pa}, 
where (^-^i)" is the n-fold composition of ^-^i, therefore C[Q]{{^—^l)"' ~ Pa}. But 
C[(5]{( — >i)"'{h's)Qa = Qa} only, so Pa ~ Qa. We thus get that P c:^ Q, and hence 
r^*C~, as desired. □ 

Based on the previous lemmas, we can prove the next result. 

Theorem 6.8. For any two processes P and Q in vrjv, if P ~ Q, then P^Q. 

Proof. We see from Lemma 15.71 that ~ is a process congruence included in ~. Since 
-^C ?a by Theorem 16. 11 ~ is a process congruence included in ^. By definition, ~ is the 
largest process congruence included in ?», therefore we have that ~C ~, finishing the 
proof of the theorem. □ 

It would be expected that ~ C~. However, this is not true, as we shall see. 

Remark 6.9. Like Theorem 16.11 the converse of the above theorem is not true in 
general, that is, two barbed congruent processes may not be full bisimilar. Even two 
barbed congruent processes may not be bisimilar in the vTTv-calculus. For example, take 
P =^ {vy)xy.xy and Q =^ {vy)xy .{uy)xy , and suppose, for simplicity, that the channel 
X is noiseless. It is easy to check by induction on context C that C[P]~C[(5] holds for 
any context. Consequently, P^Q by definition. Nevertheless, notice that there is a 

transition group P{-^i xy} and the only transition group of Q making P ^ Q possible 
is Q{-^i {vy)xy}. But it is obvious that xy oo (yy)xy. Hence, P oo Q. □ 

Finally, based on our results in Sections 4-6, we summarize the hierarchy of the 
behavioral equivalences in the vTAr-calculus, which is depicted in Figure [^b). 

Theorem 6.10. In the vTAr-calculus, 

(1) — ^ ~ C C ~ and — C~C ?s; each of the inclusions can be strict. 

(2) Neither ~C ~ nor ~ C~ holds. 



26 



7 Conclusion 



This paper is devoted to a hierarchy of behavioral equivalences in the vr^v-calculus, the 
TT-calculus with noisy channels. First, we have developed an early transitional semantics 
of the TTTv-calculus and provided two presentations of the transition rules. It is worth 
noting that this semantics is not a directly translated version of the late semantics of 
ttat in |54j . and we have found that not all bound names are compatible with alpha- 
conversion in the noisy environment, which is a striking dissimilarity between ttat and 
vr. As a result, an Open-Inp rule for inputting bound names is required. Then we 
have introduced some notions of behavioral equivalences in ttn, including reduction 
bisimilarity, barbed bisimilarity, barbed equivalence, barbed congruence, bisimilarity, 
and full bisimilarity. Some basic properties of them have also been stated. Finally, we 
have established an integrated hierarchy of these behavioral equivalences. In particular, 
because of the noisy nature of channels, the coincidence of bisimilarity and barbed 
equivalence, as well as the coincidence of full bisimilarity and barbed congruence, in the 
TT-calculus does not hold in ttat. 

There are some limits and problems arising from the present work which are worth 
further studying. We only present a hierarchy of strong behavioral equivalences; the cor- 
responding weak version that ignores invisible internal actions is a research topic. Some 
algebraic laws and axiomatizations of these behavioral equivalences are interesting prob- 
lems for future research. A hierarchy of behavioral equivalences in some subcalculus (for 
example, asynchronous vr-calculus where asynchronous observers are less discriminating 
than synchronous observers [71 [13l [TTl [HI [21]) is yet to be addressed. Note that the 
converse statements of Theorems 16.11 and 16.81 cannot hold. Hence, a necessary and suffi- 
cient condition for the converse statements to be true is desirable. Finally, the reliability 
of processes in the vTAr-calculus initiated in [54] remains an interesting issue when using 
the early transitional semantics of ttjv and non- approximate bisimilarity. 
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